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DETAILED ACTION 



1 . This action is in response to the application filed on 02/28/2000. Claims 1 -31 
were received for consideration. No amendments for the clainns were filed. 
Claims 1-31 are currently being considered. 



Double Patenting 

The nonstatutory double patenting rejection is based on a judicially 
created doctrine grounded in public policy (a policy reflected in the statute) so as 
to prevent the unjustified or improper timewise extension of the "right to exclude" 
granted by a patent and to prevent possible harassment by multiple assignees. 
See In re Goodman, 1 1 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re 
Longl 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 
F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 
USPQ 619 (CCPA 1970);and, In re Thorington, 418 F.2d 528, 163 USPQ 644 
(CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321(c) may 
be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent is shown to 
be commonly owned with this application. See 37 CFR 1 .130(b). 

Effective January 1 , 1994, a registered attorney or agent of record may 
sign a terminal disclaimer. A terminal disclaimer signed by the assignee must 
fully comply with 37 CFR 3.73(b). 



2. Claims 1-3, 11-12, 17-20, 25-27 and 31 are rejected under the 
judicially created doctrine of double patenting over claims 1-31 of U. S. Patent 
No. 6,510,349 since the claims, if allowed, would improperly extend the "right to 
exclude" already granted in the patent. 

The subject matter claimed in the instant application is fully disclosed in 
the patent and is covered by the patent since the patent and the application are 
claiming common subject matter, as both delineate a method and system of 
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adaptive security as applied to a data stream. The claims in the patent also 
disclose identifying a desired security level range, and comparing it to an actual 
security level range which is determine from the availability of security operations 
by examining a resource tracking table. The clainns in the patent also disclose 
reallocating the computing resources if the packets cannot be verified at the 
desired security level and delineate idea of altering the actual security level in the 
send host using a security thermostat. 

Furthermore, there is no apparent reason why applicant was prevented 
from presenting claims corresponding to those of the instant application during 
prosecution of the application which matured into a patent. See In re Schneller, 
397 F.2d 350, 158 USPQ 210 (CCPA 1968). See also MPEP § 804. 

Claim Objections 

3. Claim 21 objected to because of the following informalities: "The system 
claim 18" should be changed to "The system of claim 18." Appropriate correction 
is required. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 
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(e) the invention was described in (1) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for patent or 
(2) a patent granted on an application for patent by another filed in the United States before 
the invention by the applicant for patent, except that an international application filed under 
the treaty defined in section 351 (a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

4. Claims 1-3 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Kuroda (U.S. 5,935,248). ^ 

Regarding claim 1, Kuroda discloses: 

A method for applying adaptive security to a data stream, comprising the 
steps of: 

identifying a desired security level range and a desired actual security 
level which falls within the desired security level range for communicating a data 
stream from a send host to a receive host (Figure 2 item 1 1 , column 3 lines 62- 
67, column 4 lines 3-18); 

determining an actual security level in the receive host based upon the 
availability of a number of security processor operations (column 3 lines 62-67, 
column 4 lines 3-18); 

communicating the actual security level from the receive host to the send 
host (column 3 lines 62-67, column 4 lines 3-18, column 8 lines 40-46); 

generating a plurality of data packets associated with the data stream in 
the send host, the data packets having an authentication header including the 
desired security level range and the actual security level (column 8 lines 40-46); 



Application/Control Number: 09/514,119 Page 
Art Unit: 2131 

reallocating computing resources at the receive host if data packets 
cannot be verified at the desired actual security level with a current allocation of 
resources (column 7 lines 1-23); and 

verifying the data packets at the actual security level, the actual security 
level being within the desired security level range (Figure 2 item 13, column 7 
lines 48-54). 

Regarding claim 2, Kuroda discloses: 

The method of claim 1 , further comprising the step of altering the actual 
security level in the send host using a security thermostat. (Figure 1 item 14, 
column 62-65). 

Regarding claim 3, Kuroda discloses: 

The method of claim 1, wherein the step of reallocating computing 
resources at the receive host comprises identifying the availability of a number of 
security operations per second (SOPS) employed in non-critical operations at the 
receive host and reallocating these SOPS for processing the data stream 
(column 6 lines 7-28). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which fornns the basis for 
all obviousness rejections set forth in this Office action: 



Application/Control Number: 09/514,119 Page 6 

Art Unit: 2131 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

5. Claims 4-31 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kuroda (U.S. 5,935,248) in view of Jurkevich et al. (U.S. 5,164,938). 

Regarding claim 11, Kuroda discloses: 

A method for communicating and applying adaptive security to a data 
stream comprising a plurality of data packets, comprising the steps of: 

identifying a desired level range and a desired actual security level which 
falls within the desired security level range for the data stream to be received by 
a host (Figure 2 item 11, column 3 lines 62-67, column 4 lines 3-18); 

determining the availability of a number of security processor operations at 
the host (column 3 lines 62-67, column 4 lines 3-18); 

reallocating computing resources at the host if the data stream cannot be 
verified at the desired security level (column 7 lines 1-23); 

verifying the data packets at the actual security level, the actual security 
level being within the desired security level range (Figure 2 item 13, column 7 
lines 48-54). 

Kuroda does not explicitly describe a method of reallocating communication 
resources if there are insufficient computing resources available for reallocation 
at the host. Jurkevich teaches a method of: 
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reallocating communication resources if there are insufficient computing 
resources available for reallocation at the host (column 7 lines 27-32). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicants invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to control the communication resources, through 
the use of Kuroda's communication control unit (Fig. 6 item 31), if there are 
insufficient computing resources at one of the clients. This system developed 
from the combination of the teachings of Jurkevich and Kuroda allows for more 
flexibility in allocating communication resources between the different clients and 
servers, allowing for more efficient use of computing and communication 
resources. 



Regarding claim 18, Kuroda discloses: 

A system for facilitating data communication to a host with adaptive 
security comprising: 

a means for determining whether a desired actual security level for a 
transmitted data stream falls within a desired security level range (Figure 2 item 
1 1 , column 3 lines 62-67, column 4 lines 3-1 8); 
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a means for determining the availability of a number of security processor 
operations at the host (column 3 lines 62-67. column 4 lines 3-18); 

a means for reallocating computing resources at the host if the data 
stream cannot be verified at the desired security level (column 7 lines 1-23). 
Kuroda does not explicitly describe a means of reallocating communication 
resources if there are insufficient computing resources available for reallocation 
at the host. Jurkevich teaches a method of a means for reallocating 
communication resources if there are insufficient computing resources available 
for reallocation at the host (column 7 lines 27-32). 

Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to control the communication resources, through 
the use of Kuroda's communication control unit (Fig. 6 item 31 ), if there are 
insufficient computing resources at one of the clients. This system developed 
from the combination of the teachings of Jurkevich and Kuroda allows for more 
flexibility in allocating communication resources between the different clients and 
servers, allowing for more efficient use of computing and communication 
resources. 
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Regarding claim 25, Kuroda discloses: 

A computer program embodied on a computer-readable medium for 
facilitating data communication to a host with adaptive security, comprising: 

logic configured to determine whether a desired actual security level for a 
transmitted data stream falls within a desired security level range (Figure 2 item 
11, column 3 lines 62-67, column 4 lines 3-18); 

logic configured to determine the availability of a number of security 
processor operations at the host (column 3 lines 62-67, column 4 lines 3-18); 

logic configured to reallocate computing resources at the host if the data 
stream cannot be verified at the desired security level (column 7 lines 1-23). 
Kuroda does not explicitly describe logic to reallocate communication resources if 
there are insufficient computing resources available for reallocation at the host. 
Jurkevich teaches a method of: 

logic configured to reallocate communication resources if there are 
insufficient computing resources available for reallocation at the host (column 7 
lines 27-32). 

Jurkevich does not state that this reallocation of communication resources is to 
be used in an adaptive security method to be applied to a data stream. Kuroda 
delineates a scenario with a plurality of server and client apparatuses (Figure 6, 
column 8 lines 34-45) comprising of different data streams. Also, Kuroda 
describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
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combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to control the communication resources, through 
the use of Kuroda's communication control unit (Fig. 6 item 31), if there are 
insufficient computing resources at one of the clients. This system developed 
from the combination of the teachings of Jurkevich and Kuroda allows for more 
flexibility in allocating communication resources between the different clients and 
servers, allowing for more efficient use of computing and communication 
resources. 

Claim 4 is rejected applied above in rejecting claim 1 . Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of determining 
the bandwidth of the data stream being sent from the send host to the receive 
host. Jurkevich teaches determining the bandwidth of the data stream (column 7 
lines 27-32). 

Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
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method that also has the ability to recognize the bandwidth being used, through 
the use of Kuroda's communication control unit (Fig. 6 item 31 ), to recognize if 
communications resources are scarce. This system developed from the 
combination of the teachings of Jurkevich and Kuroda allows for more flexibility in 
allocating bandwidth between the different clients and servers, allowing for more 
efficient use of computing and communication resources. 

Claim 12 is rejected applied above in rejecting claim 1 1 . Furthermore, Kuroda 
discloses: 

The method of claim 1 1 , wherein the step of reallocating computing resources at 
the host comprises identifying the availability of a number of security operations 
per second (SOPS) employed in non-critical operations at the host and 
reallocating these SOPS for processing the data stream (column 6 lines 7-28). 

Claim 13 is rejected applied above in rejecting claim 1 1 . Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth of the data stream. 
Jurkevich teaches the step of reallocating communication resources comprising 
adjusting the bandwidth of a data stream (column 7 lines 27-32). 
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Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, colunnn 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth, through the use of 
Kuroda's communication control unit (Fig. 6 item 31), if there are insufficient 
computing resources at one of the clients. This system developed from the 
combination of the teachings of Jurkevich and Kuroda allows for more flexibility in 
allocating bandwidth between the different clients and servers, allowing for more 
efficient use of computing and communication resources. 

Claim 17 is rejected applied above in rejecting claim 1 1 . Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly mention the step of using 
communication resources to calibrate the computing resources.' Jurkevich 
teaches the step of calibrating the computing resources with the communication 
resources (column 31 lines 14-28). Kuroda delineates a scenario with a plurality 
of server and client apparatuses (Figure 6, column 8 lines 34-45) comprising of 
different data streams. Also, Kuroda describes a communication control unit 
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(Figure 6, item 31 ) that controls communications between servers and clients. It 
would have been obvious to one of ordinary skill in the art at the time the 
applicant's invention was made to combine the teachings of Kuroda and 
Jurkevich, to achieve an adaptive security method that also has the ability to 
calibrate the computing resources using the communication resources through 
the use of Kuroda's communication control unit (Fig. 6 item 31 ). This system 
would allow hosts with insufficient computing resources to handle a certain 
number of security operations to be calibrated with the available communication 
resources so that to increase the ability of multiple hosts to handle more security 
operations per second. 

Claim 19 is rejected applied above in rejecting claim 18. Furthermore, Kuroda 
discloses: 

The system of claim 18, wherein the means for determining the availability 
of a number of security processor operations comprises means for determining a 
processor time availability by examining a resource tracking tablb for non-critical 
processor time usage of at least one existing data stream (column 3 lines 62-67, 
column 4 lines 3-18). 

Claim 20 is rejected applied above in rejecting claim 18. Furthermore, Kuroda 
discloses: 

The system of claim 18, wherein the means for determining the availability 
of a number of security processor operations comprises means for identifying the 
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availability of a number of security processor per second (SOPS) employed in 
non-critical operations at the host and reallocating these SOPS for processing 
the data stream (column 7 lines 1-23). 



Claim 21 is rejected applied above in rejecting claim 18. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth of the data stream. 
Jurkevich teaches the step of reallocating communication resources comprising 
adjusting the bandwidth of a data stream (column 7 lines 27-32). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth, through the use of 
Kuroda's communication control unit (Fig. 6 item 31 ), if there are insufficient 
computing resources at one of the clients. This system developed from the 
combination of the teachings of Jurkevich and Kuroda allows for more flexibility in 
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allocating bandwidth between the different clients and servers, allowing for nnore 
efficient use of computing and communication resources. 

Claim 24 is rejected applied above in rejecting claim 18. Furthermore. Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly mention the step of using 
communication resources to calibrate the computing resources. Jurkevich 
teaches the step of calibrating the computing resources with the communication 
resources (column 31 lines 14-28). Kuroda delineates a scenario with a plurality 
of server and client apparatuses (Figure 6, column 8 lines 34-45) comprising of 
different data streams. Also, Kuroda describes a communication control unit 
(Figure 6, item 31) that controls communications between servers and clients. It 
would have been obvious to one of ordinary skill in the art at the time the 
applicant's invention was made to combine the teachings of Kuroda and 
Jurkevich, to achieve an adaptive security method that also has the ability to 
calibrate the computing resources using the communication resources through 
the use of Kuroda's communication control unit (Fig. 6 item 31). This system 
would allow hosts with insufficient computing resources to handle a certain 
number of security operations to be calibrated with the available communication 
resources so that to increase the ability of multiple hosts to handle more security 
operations per second. 
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Claim 26 is rejected applied above in rejecting claim 25. Furthermore, Kuroda 
discloses: 

The computer program of claim 25, wherein the logic configured to 
determine the availability of a number of security processor operations comprises 
logic configured to determine a processor time availability by examining a 
resource tracking table for a non-critical processor time usage of at least one 
existing data stream (column 3 lines 62-67, column 4 lines 3-18). 

Claim 27 is rejected applied above in rejecting claim 25. Furthermore, Kuroda 
discloses: 

The computer program of claim 25, wherein the logic configured to 
determine the availability of a number of security processor operations comprises 
logic configured to identify the availability of a number of security operations per - 
second (SOPS) employed in non-critical operations at the host and reallocate 
these SOPS available for processing the data stream (column 7 lines 1-23). 

Claim 28 is rejected applied above in rejecting claim 25. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the logic of reallocating 
communication resources by adjusting the bandwidth of the data stream. 
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Jurkevich teaches the step of reallocating communication resources comprising 
adjusting the bandwidth of a data stream (column 7 lines 27-32). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streanns. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth, through the use of 
Kuroda's communication control unit (Fig. 6 item 31 ), if there are insufficient 
computing resources at one of the clients. This system developed from the 
combination of the teachings of Jurkevich and Kuroda allows for more flexibility in 
allocating bandwidth between the different clients and servers, allowing for more 
efficient use of computing and communication resources. 

Claim 31 is rejected applied above in rejecting claim 25. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly mention the step of using 
communication resources to calibrate the computing resources. Jurkevich 
teaches the step of calibrating the computing resources with the communication 
resources (column 31 lines 14-28). Kuroda delineates a scenario with a plurality 
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of server and client apparatuses (Figure 6, column 8 lines 34-45) comprising of 
different data streams. Also, Kuroda describes a communication control unit 
(Figure 6, item 31) that controls communications between servers and clients. It 
would have been obvious to one of ordinary skill in the art at the time the 
applicant's invention was made to combine the teachings of Kuroda and 
Jurkevich, to achieve an adaptive security method that also has the ability to 
calibrate the computing resources using the communication resources through 
the use of Kuroda's communication control unit (Fig. 6 item 31). This system 
would allow hosts with insufficient computing resources to handle a certain 
number of security operations to be calibrated with the available communication 
resources so that to increase the ability of multiple hosts to handle more security 
operations per second. 

Claim 5 is rejected applied above in rejecting claim 4. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. Kuroda does not explicitly describe a method of reallocating 
communication resources if there are insufficient computing resources available 
for reallocation at the host. Jurkevich teaches a method of: 

reallocating communication resources if there are insufficient computing 
resources available for reallocation at the host (column 7 lines 27-32). 
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Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, colunnn 8 lines 34-45) comprising of different data streanns. Also, 
Kuroda describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to control the communication resources, through 
the use of Kuroda's communication control unit (Fig. 6 item 31 ), if there are 
insufficient computing resources at one of the clients. This system developed 
from the combination of the teachings of Jurkevich and Kuroda allows for more 
flexibility in allocating communication resources between the different clients and 
servers, allowing for more efficient use of computing and communication 
resources. 

Claim 14 is rejected applied above in rejecting claim 13. Furthermore, Kuroda 
discloses the step of identifying the number of security operations per second 
(SOPS) that will be required to process the data stream and comparing this 
number with the number of SOPS available at the receive host. However, 
Kuroda does not explicitly note that the determination of the number of security 
operations at the host would determine the amount of bandwidth adjustment 
needed. Jurkevich teaches that bandwidth management can be based on a 
number of factors attributed to priority including loss tolerance, average packet 
length, and activity level (column 21 lines 10-35). This activity level can be 
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interpreted as the nunnber of security operations at the receive host. Therefore it 
would have been obvious to one of ordinary skill in the art at the tinne of the 
applicant's invention to combine the teachings of Kuroda and Jurkevich to gain 
the flexibility of not only reallocating the computing resources when there is 
insufficient computing power at a host, but to also reallocate the bandwidth to 
obtain the maximum use of the available resources. 

Claim 15 is rejected applied above in rejecting claim 13. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth by decreasing the 
transmission rate. Jurkevich teaches a method, wherein the bandwidth is 
adjusted by decreasing the transmission rate (column 28 lines 50-63). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by decreasing the 
transmission rate, through the use of Kuroda's communication control unit (Fig. 6 
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item 31 ), if there are insufficient computing resources at one of the clients. This 
system developed from the combination of the teachings of Jurkevich and 
Kuroda allows for more flexibility in allocating bandwidth between the different 
clients and servers, allowing for more efficient use of computing and 
communication resources. 



Claim 16 is rejected applied above in rejecting claim 13. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of adjusting 
bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of the data packets. Jurkevich teaches a method of 
adjusting bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of data packets(column 3 lines 18-22, column 20 lines 54- 
61 , column 26 lines 51-53). Kuroda does not explicitly state that the bandwidth is 
adjusted by increasing the security:message ratio of the data packets, however, 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
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method that also has the ability to adjust the bandwidth by increasing the 
security:message ratio of the data packets. This would beneficial if the multiple 
server to client connections needed more bandwidth for the security operations. 
The increase in security:message ratio of the data packets would increase the 
bandwidth available to support the security operations. 



Claim 22 is rejected applied above in rejecting claim 21 . Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth by decreasing the 
transmission rate. Jurkevich teaches a method, wherein the bandwidth is 
adjusted by decreasing the transmission rate (column 28 lines 50-63). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by decreasing the 
transmission rate, through the use of Kuroda's communication control unit (Fig. 6 
item 31 ), if there are insufficient computing resources at one of the clients. This 
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system developed from the combination of the teachings of Jurkevich and 
Kuroda allows for more flexibility in allocating bandwidth between the different 
clients and servers, allowing for more efficient use of computing and 
communication resources. 



Claim 23 is rejected applied above in rejecting claim 21 . Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of adjusting 
bandwidth by increasing a data portion of the data packets to lower a . 
security:message ratio of the data packets, Jurkevich teaches a method of 
adjusting bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of data packets(column 3 lines 18-22, column 20 lines 54- 
61 , column 26 lines 51-53). Kuroda does not explicitly state that the bandwidth is 
adjusted by increasing the security:message ratio of the data packets, however, 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by increasing the 
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security:message ratio of the data packets. This would beneficial if the multiple 
server to client connections needed more bandwidth for the security operations. 
The increase in security:message ratio of the data packets would increase the 
bandwidth available to support the security operations. 

Claim 29 is rejected applied above in rejecting claim 28. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the logic of reallocating 
communication resources by adjusting the bandwidth by decreasing the 
transmission rate. Jurkevich teaches a method, wherein the bandwidth is 
adjusted by decreasing the transmission rate (column 28 lines 50-63). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by decreasing the 
transmission rate, through the use of Kuroda's communication control unit (Fig. 6 
item 31 ), if there are insufficient computing resources at one of the clients. This 
system developed from the combination of the teachings of Jurkevich and 
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Kuroda allows for more flexibility in allocating bandwidth between the different 
clients and servers, allowing for more efficient use of computing and 
communication resources. 

Claim 30 is rejected applied above in rejecting claim 28. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However. Kuroda does not explicitly describe the logic of adjusting 
bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of the data packets. Jurkevich teaches a method of 
adjusting bandwidth by increasing a data portion of the data packets to lower a 
securityimessage ratio of data packets(column 3 lines 18-22, column 20 lines 54- 
61 , column 26 lines 51 -53). Kuroda does not explicitly state that the bandwidth is 
adjusted by increasing the security:message ratio of the data packets, however, 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by increasing the 
security:message ratio of the data packets. This would beneficial if the multiple 
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server to client connections needed nnore bandwidth for the security operations. 
The increase in security:message ratio of the data packets would increase the 
bandwidth available to support the security operations. 



Claim 6 is rejected applied above in rejecting claim 5. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth of the data stream. 
Jurkevich teaches the step of reallocating communication resources comprising 
adjusting the bandwidth of a data stream (column 7 lines 27-32). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth, through the use of 
Kuroda's communication control unit (Fig. 6 item 31), if there are insufficient 
computing resources at one of the clients. This system developed from the 
combination of the teachings of Jurkevich and Kuroda allows for more flexibility in 
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allocating bandwidth between the different clients and servers, allowing for more 
efficient use of computing and communication resources. 

Claim 7 is rejected applied above in rejecting claim 6. Furthermore, Kuroda 
discloses the step of identifying the number of security operations per second 
(SOPS) that will be required to process the data stream and comparing this 
number with the number of SOPS available at the receive host. However, 
Kuroda does not explicitly note that the determination of the number of security 
operations at the host would determine the amount of bandwidth adjustment 
needed. Jurkevich teaches that bandwidth management can be based on a 
number of factors attributed to priority including loss tolerance, average packet 
length, and activity level (column 21 lines 10-35). This activity level can be 
interpreted as the number of security operations at the receive host. Therefore it 
would have been obvious to one of ordinary skill in the art at the time of the 
applicant's invention to combine the teachings of Kuroda and Jurkevich to gain 
the flexibility of not only reallocating the computing resources when there is 
insufficient computing power at a host, but to also reallocate the bandwidth to 
obtain the maximum use of the available resources. 

Claim 8 is rejected applied above in rejecting claim 6. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
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resources. However, Kuroda does not explicitly describe the step of reallocating 
communication resources by adjusting the bandwidth by decreasing the 
transmission rate. Jurkevich teaches a method, wherein the bandwidth is 
adjusted by decreasing the transmission rate (column 28 lines 50-63). 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by decreasing the 
transmission rate, through the use of Kuroda's communication control unit (Fig. 6 
item 31 ), if there are insufficient computing resources at one of the clients. This 
system developed from the combination of the teachings of Jurkevich and 
Kuroda allows for more flexibility in allocating bandwidth between the different 
clients and servers, allowing for more efficient use of computing and 
communication resources. 

Claim 9 is rejected applied above in rejecting claim 6. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly describe the step of adjusting 
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bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of the data packets. Jurkevich teaches a method of 
adjusting bandwidth by increasing a data portion of the data packets to lower a 
security:message ratio of data packets(coiumn 3 lines 18-22, column 20 lines 54- 
61 , column 26 lines 51 -53). Kuroda does not explicitly state that the bandwidth is 
adjusted by increasing the security:message ratio of the data packets, however, 
Kuroda delineates a scenario with a plurality of server and client apparatuses 
(Figure 6, column 8 lines 34-45) comprising of different data streams. Also, 
Kuroda describes a communication control unit (Figure 6, item 31 ) that controls 
communications between servers and clients. It would have been obvious to one 
of ordinary skill in the art at the time the applicant's invention was made to 
combine the teachings of Kuroda and Jurkevich, to achieve an adaptive security 
method that also has the ability to adjust the bandwidth by increasing the 
security:message ratio of the data packets. This would beneficial if the multiple 
server to client connections needed more bandwidth for the security operations. 
The increase in security:message ratio of the data packets would increase the 
bandwidth available to support the security operations. 

Claim 10 is rejected applied above in rejecting claim 6. Furthermore, Kuroda 
discloses a method of communicating and applying adaptive security to a data 
stream. Kuroda further teaches identifying a desired security level, determining 
the availability of security operations at the host, and reallocating computing 
resources. However, Kuroda does not explicitly mention the step of using 
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communication resources to calibrate the computing resources. Jurkevich 
teaches the step of calibrating the computing resources with the communication 
resources (column 31 lines 14-28). Kuroda delineates a scenario with a plurality 
of server and client apparatuses (Figure 6, column 8 lines 34-45) comprising of 
different data streams. Also, Kuroda describes a communication control unit 
(Figure 6, item 31 ) that controls communications between servers and clients. It 
would have been obvious to one of ordinary skill in the art at the time the 
applicant's invention was made to combine the teachings of Kuroda and 
Jurkevich, to achieve an adaptive security method that also has the ability to 
calibrate the computing resources using the communication resources through 
the use of Kuroda's communication control unit (Fig. 6 item 31 ). This system 
would allow hosts with insufficient computing resources to handle a certain 
number of security operations to be calibrated with the available communication 
resources so that to increase the ability of multiple hosts to handle more security 
operations per second. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Kaveh Abrishamkar whose telephone number 
is 703-305-8892. The examiner can normally be reached on Monday thru Friday 
8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax 
phone number for the organization where this application or proceeding is 
assigned is 703-305-8892. 

Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 
703-305-3900. 
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